PEERSTITCH Malware Exploits FortiOS Flaw to Hijack Tagged VPN Sessions
Researchers at The Hacker News reported that a new malware family called PEERSTITCH is being deployed through a vulnerability in Fortinet's FortiOS, allowing attackers to bypass security checks on VPN sessions marked with specific tags. The technique lets intruders operate inside established, trusted VPN tunnels, making malicious traffic harder to distinguish from legitimate remote access. It matters because FortiGate appliances guard the network edge at many large organizations, so a flaw that evades session checks could give attackers a quiet foothold into corporate networks.
Sources (1)
Related stories
Google Takes Down 1.3 Million-Device Android Botnet Tied to TV Box Maker
Google disrupted a botnet that had infected roughly 1.3 million Android devices, many of them TV streaming boxes, according to The Hacker News. Investigators found that a TV box manufacturer had sold criminal access to its own devices, embedding the malware at the supply-chain level. The case highlights how cheap connected hardware can ship with backdoors that turn consumer devices into a large-scale attack network.
Shared ChatGPT Links Could Let Attackers Run Code and Read Private Chats
The Hacker News reports that a shared ChatGPT link may allow attacker-controlled code to execute within a user's session and expose private chats. The issue matters because it could turn a seemingly ordinary shared conversation into a route for account compromise and data exposure.
The Hacker News 2 links
Chinese Hackers Use AI Tool ARTEX to Target 200+ Organizations Worldwide
Chinese hackers reportedly used an AI-powered tool called ARTEX to target more than 200 organizations worldwide. The campaign matters because AI-assisted attacks could scale intrusion efforts and raise risks for governments and businesses.
TeamViewer Flaw Lets Malicious Remote Hosts Attack Connecting Users
A reported TeamViewer vulnerability allows a remote computer being controlled to attack the user who connects to it, reversing the usual trust direction. TeamViewer is widely used for remote support and access, so the flaw could expose technicians and other users to compromise when connecting to untrusted machines.
WordPress RCE Flaw Triggers Nearly 63,000 Attack Attempts in 24 Hours
Attackers launched roughly 63,000 attempts in a single day to exploit a remote code execution vulnerability in WordPress, according to reporting by The Hacker News. The volume of activity signals active, widespread scanning and exploitation efforts against the widely used publishing platform. Sites running affected versions should patch immediately, since successful RCE exploitation can give attackers full control of a server.